Re: CBL Composite Blocking List problem

Paul Gleave <[email protected]> Fri, 8 Apr 2005 16:52:12 +0100
Newsgroups gmane.mail.spam.active-spam-killer.general
Organization Octonet Limited
Message-ID <[email protected]>
(This is a followup to a thread from the middle of last year)

I have now received confirmation from CBL that the reason my IP is
continually blacklisted is due to ASK's SMTP validation behaviour.

This could affect anyone using ASK and most may not even realise that
they are at risk of finding themselves on the Composite Blocking List
through no fault of their own.

I quote from CBL:

> This software impersonates the recipient's when doing a
> sender-verification probe, not to mention violating RFC2821 with an
> improper SMTP transaction. We've looked at the ASK code, and it is
> indeed deliberately doing so. This can be disabled by setting
> rc_smtp_validate = off in the config.
>
> ASK can't expect to forge recipient's domains all over the place and get
> away with it.
>
> See ASK bug report 996460:
>
> http://sourceforge.net/tracker/index.php?func=detail&aid=996460&group_id=42266&atid=432545

Marco, is the fix that Allan Simmons proposes going to be adopted?

Regards

Paul




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click